Back to Rule

Rule History

SID: 3300083 • Source: pawpatrules

Versions (7)

Version DetailsCurrent

Rev: 56Feb 15, 2022, 12:00 PM

🐾 - 🚨 Thunderbird 🕊 Email client 📧 potentially vulnerable if version < 115.14 or 128.1

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Thunderbird 🕊 Email client 📧 potentially vulnerable if version < 115.14 or 128.1"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; http.user_agent; content:"Mozilla/5.0"; nocase; content:"Thunderbird/"; fast_pattern; nocase; content:!"Thunderbird/115.14"; nocase; content:!"Thunderbird/128.1"; nocase; reference:url,https://www.thunderbird.net/; metadata:created_at 2022_02_15, updated_at 2024_08_07; sid:3300083; rev:56; classtype:policy-violation;)

Feb 15, 2022, 12:00 PM

Aug 7, 2024, 12:00 PM

Feb 21, 2024, 4:00 PM

May 29, 2025, 11:12 PM

rules/PAW-PATRULES_VULN.rules